[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] ioxã®ãƒ

iox id:iox

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ioxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (14)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

404 Not Found
å®Ÿåãªã©ã®å€‹äººæƒ…å ±ã‚’å…¬é–‹ã™ã‚‹ã“ã¨ã¯å¤§å¤‰å±é™ºã§ã™ã€‚ å®Ÿåã•ãˆåˆ†ã‹ã‚Œã°ã€ä½æ‰€ã‚„é›»è©±ç•ªå·ãªã©ã‚’èª¿ã¹ã‚‹ã“ã¨ãŒå¯èƒ½ãªã®ã§ã™ã€‚ TELECOREã¨ã„ã†ãƒ†ãƒ¬ã‚³ã‚¢æ ªå¼ä¼šç¤¾ãŒé‹å–¶ã™ã‚‹å€‹äººæƒ…å ±ç´¹ä»‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”å˜çŸ¥ã§ã™ã‹ã€‚ ã“ã®ã‚µã‚¤ãƒˆã‚’åˆ©ç”¨ã™ã‚Œã°ã€ã‚ãªãŸã®ä½æ‰€ã‚„é›»è©±ç•ªå·ã‚’èª¿ã¹ã‚‹ã“ã¨ãŒã§ãã¦ã—ã¾ã†ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ç§ã®ä½æ‰€ã‚„é›»è©±ç•ªå·ã¯ç°¡å˜ã«æ¤œç´¢ã™ã‚‹ã“ã¨ãŒã§ãã¦ã—ã¾ã„ã¾ã—ãŸã€‚ TELECOREï¼ˆãƒ†ãƒ¬ã‚³ã‚¢ï¼‰ç„¡æ–™é›»è©±ç•ªå·æ¤œç´¢ã‚µãƒ¼ãƒ“ã‚¹ â– TELECOREã§å€‹äººæƒ…å ±ã‚’æ¤œç´¢ã™ã‚‹æ–¹æ³• ã€Œç„¡æ–™æ¤œç´¢ãƒã‚°ã‚ªãƒ³ã€ã¨æ›¸ã‹ã‚ŒãŸãƒœã‚¿ãƒ³ã‚’ã‚¯ãƒªãƒƒã‚¯ã™ã‚‹ã¨ã€å€‹äººæƒ…å ±ã‚’æ¤œç´¢ã™ã‚‹ãƒšãƒ¼ã‚¸ã¸ç§»å‹•ã—ã¾ã™ã€‚ ã“ã®ã‚µã‚¤ãƒˆã§å€‹äººæƒ…å ±ã‚’èª¿ã¹ã‚‹æ–¹æ³•ã¯ã€å¤§ããåˆ†ã‘ã¦3ã¤ã‚ã‚Šã¾ã™ã€‚ 1. éƒ½é“åºœçœŒã¨å¸‚åŒºç”ºæ‘ã‚’å…¥åŠ›ã—ã€è‹—å—ã‚’å…¥åŠ›ã—ã€æ¤œç´¢ãƒœã‚¿ãƒ³ã‚’æŠ¼ã™ã€‚ 2. éƒ½é“åºœçœŒã¨å¸‚åŒºç”ºæ‘ã‚’å…¥åŠ›ã—ã€è‹—å—ã¨åå‰ã‚’å…¥åŠ›ã—ã€æ¤œç´¢ãƒœã‚¿ãƒ³ã‚’æŠ¼ã™ã€‚ 3.
iox 2009/04/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€ã‚¦ã‚§ãƒ–è„†å¼±æ€§æ¤œçŸ¥ãƒ„ãƒ¼ãƒ«ã€ŒRatProxyã€ã‚’ãƒªãƒªãƒ¼ã‚¹
Googleã¯ç±³å›½æ™‚é–“7æœˆ1æ—¥ã€ã‚¦ã‚§ãƒ–é–‹ç™ºè€…ãŒã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆè„†å¼±æ€§ã‚’ç™ºè¦‹ã—ã€ä¿®æ£ã™ã‚‹ãŸã‚ã®ãƒ„ãƒ¼ãƒ«ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ãŸã€‚ Googleã«ã‚ˆã‚‹ã¨ã€ã€ŒRatProxyã€ã¨å‘¼ã°ã‚Œã‚‹ã“ã®ç„¡æ–™ãƒ„ãƒ¼ãƒ«ã¯ã€åŠè‡ªå‹•åŒ–ã•ã‚ŒãŸå¤§éƒ¨åˆ†ãŒå—å‹•åž‹ã®ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£è¦–ãƒ„ãƒ¼ãƒ«ã§ã€è¤‡é›‘ãªWeb 2.0ç’°å¢ƒã«ãŠã‘ã‚‹æ—¢å˜ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¸»å°Žåž‹ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®ç›£è¦–ã«åŸºã¥ãæ½œåœ¨çš„å•é¡ŒãŠã‚ˆã³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£ã®è¨è¨ˆãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’æ£ç¢ºã‹ã¤é«˜æ„Ÿåº¦ã«æ¤œå‡ºã—ã€è‡ªå‹•çš„ã«æ³¨é‡ˆã‚’ä»˜ã‘ã‚‹ã‚ˆã†ã«æœ€é©åŒ–ã•ã‚Œã¦ã„ã‚‹ã¨ã„ã†ã€‚ åŒãƒ„ãƒ¼ãƒ«ã¯ã¾ãŸã€å¹…åºƒãè„†å¼±æ€§ã‚’æ¤œçŸ¥ã—ã€ãƒ©ãƒ³ã‚¯ä»˜ã‘ã™ã‚‹ã€‚ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆXSRFï¼‰ã‚„ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼‰ã®ã»ã‹ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ãªã©ã‚‚æ¤œçŸ¥ã™ã‚‹ã€‚ RatProxyã¯ã€Linuxã€FreeBSDã€MacOS Xã€Windowsï¼ˆCygwinï¼‰ã®4ç¨®é¡žã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ï¼ˆOSï¼‰ã«å¯¾å¿œã—ã¦
iox 2008/07/08
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

xss
ãƒªãƒ³ã‚¯
15ç¨®é¡žã®SQL Injectionãƒ„ãƒ¼ãƒ«è©•ä¾¡
ã“ã“ã®ã¨ã“ã‚ã€ã„ãã¤ã‹ã®SQL Injectionãƒ„ãƒ¼ãƒ«ã«ã¤ã„ã¦èª¿ã¹ã¦ã„ã¾ã—ãŸã€‚ä»Šæ—¥ã¯ãã®çµæžœã‚’æ—¥è¨˜ã«æ›¸ã„ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ã¯ã˜ã‚ã« SQL Injectionãƒ„ãƒ¼ãƒ«ã¨ã¯ SQL Injectionè„†å¼±æ€§ã®ç™ºè¦‹ã¨ã€ç™ºè¦‹ã—ãŸè„†å¼±æ€§ã‚’çªã„ã¦ã®DBå†…æƒ…å ±ã®å–å¾—ã‚’è¡Œãªã†ãŸã‚ã®ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚ ãŸã ã—ã€å¤šãã®ãƒ„ãƒ¼ãƒ«ã§ã¯ã€Œè„†å¼±æ€§ã®ç™ºè¦‹ã€ã¯ãŠã¾ã‘ã§ã€å¾Œè€…ã®DBå†…æƒ…å ±ã®å–å¾—ã«ä¸»çœ¼ã‚’ç½®ã„ã¦ã„ã¾ã™ã€‚ä¸€èˆ¬çš„ã«ã¯ã€æ±Žç”¨ã®Webè„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠãªã©ã§è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã¦ã€ãã®è„†å¼±æ€§ã«å¯¾ã—ã¦ã“ã®æ—¥è¨˜ã«æ›¸ã„ã¦ã„ã‚‹ã‚ˆã†ãªãƒ„ãƒ¼ãƒ«ã‚’ä½¿ã£ã¦æƒ…å ±ã‚’å–å¾—ã™ã‚‹ã¨ã„ã†ä½¿ã„æ–¹ã‚’ã™ã‚‹ã“ã¨ãŒå¤šã„ã§ã—ã‚‡ã†ã€‚ SQL Injectionãƒ„ãƒ¼ãƒ«ã¯ã€ã„ã‚ã‚†ã‚‹Hackingãƒ„ãƒ¼ãƒ«ã§ã™ã€‚è„†å¼±æ€§æ¤œæŸ»ã‚’è¡Œãªã†è€…ã‹ã€ã•ã‚‚ãªã‘ã‚Œã°Crackingã‚’è¡Œãªã†çŠ¯ç½ªè€…ãŒä½¿ã†ãã‚‰ã„ã§ã€ä¸€èˆ¬ã®Webé–‹ç™ºè€…ã‚„ãƒ¦ãƒ¼ã‚¶ã®äººãŒä½¿ã†å¿…è¦ã«è¿«ã‚‰ã‚Œã‚‹ã“ã¨ã¯ç„¡ã„ã§ã—ã‚‡ã†ã€‚ ãƒ„ãƒ¼ãƒ«ã®ä½¿ç”¨ã«éš›ã—ã¦
iox 2007/12/04
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

database

sql
ãƒªãƒ³ã‚¯
ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ã„ã˜ã‚Œã°è„†å¼±æ€§ã®ä»•çµ„ã¿ãŒè¦‹ãˆã‚‹ã®ã ï¼
telnetã§ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’æ‰“ã¤ã®ã¯é¢å€’â€¦â€¦ ã‚¯ã‚¦ã€€ã€Œã†ãƒ¼ã‚“ã€‚ã‚ã‚“ã©ãã•ã„â€¦â€¦ã€ ã‚¸ãƒ¥ãƒ³ã•ã‚“ã«Webã‚¢ãƒ—ãƒªã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¨ã—ã¦é‡è¦ãªåŸºç¤Žã€HTTPã®ã—ãã¿ã‚’æ•™ãˆã¦ã‚‚ã‚‰ã£ãŸã‚¯ã‚¦ã¯ã€å¼•ãç¶šãHTTPã¨æ ¼é—˜ä¸ã ã€‚ ã‚¯ã‚¦ã¯ã‚¸ãƒ¥ãƒ³ã•ã‚“ã«æ•™ã‚ã£ãŸã¨ãŠã‚Štelnetã‚’ä½¿ã£ã¦HTTPã‚’å‹‰å¼·ã—ã¦ã„ãŸã€‚ã—ã‹ã—ã€telnetã§é™çš„ãƒ•ã‚¡ã‚¤ãƒ«ã®é–²è¦§ãªã©ã¯æ¯”è¼ƒçš„ç°¡å˜ã«ã§ãã‚‹ã®ã ãŒã€è‚å¿ƒã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®é–²è¦§ã‚’è¡Œã†ã«ã¯éžå¸¸ã«é¢å€’ã§ã‚ã£ãŸã€‚ ãƒ¦ã‚¦ãƒ¤ã€€ã€Œã©ã†ã—ãŸã®ï¼Ÿã€ ã‚¯ã‚¦ã€€ã€ŒHTTPã®å‹‰å¼·ã—ã‚ˆã†ã¨æ€ã£ãŸã‚“ã ã‘ã©ã€ã‚³ãƒžãƒ³ãƒ‰ã‚’ã„ã¡ã„ã¡æ‰“ã¡è¾¼ã‚€ã®å¤§å¤‰ãªã‚“ã ã‚ˆãâ€¦â€¦ã€ ãƒ¦ã‚¦ãƒ¤ã€€ã€Œãªã‚“ã‹ãã†ã„ã†ã®ã€ç°¡å˜ã«ã§ãã‚‹ãƒ„ãƒ¼ãƒ«ã‚ã‚‹ã‚“ã˜ã‚ƒãªã„ã®ï¼Ÿã€ ã‚¯ã‚¦ã€€ã€Œã‚ã‚ã€ãã†ã‹ã€‚ã‚ˆãè€ƒãˆãŸã‚‰ãã†ã„ã†ã®ã‚ã‚Šãã†ã ãã€‚ã¡ã‚‡ã£ã¨æŽ¢ã—ã¦ã¿ã‚ˆã£ã¨ã€ ãƒ¦ã‚¦ãƒ¤ã€€ã€Œã¾ã‚ã€ãã‚Œã¯ã„ã„ã¨ã—ã¦ã ã€‚æ˜¨æ—¥é ¼ã‚“ã§ãŠã„ãŸè³‡æ–™ã£ã¦ã©ã†ãªã£ãŸï¼Ÿã€ ã‚¯ã‚¦ã€€ã€Œã‚ã‚ã£ã€‚ã”ã‚ã‚“ï¼ å…±æœ‰ã‚µãƒ¼
iox 2007/10/30
http

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ä¾¿åˆ©ãƒ„ãƒ¼ãƒ«

Web
ãƒªãƒ³ã‚¯
MOONGIFT: Â» SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’é˜²ããƒ—ãƒã‚ã‚·ã€ŒGreenSQLã€:ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚’æ¯Žæ—¥ç´¹ä»‹
â€» ç”»åƒã¯å…¬å¼ã‚µã‚¤ãƒˆãƒ‡ãƒ¢ã‚ˆã‚Šã€‚ DBã‚’ä½¿ã£ãŸWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒå½“ãŸã‚Šå‰ã«ãªã‚Šã€ãã®é‡è¦æ€§ã¯å¢—ã™ä¸€æ–¹ã ã€‚ä¸‡ä¸€ã€ãƒ‡ãƒ¼ã‚¿ãŒæ¶ˆå¤±ã™ã‚‹ã‚ˆã†ãªäº‹æ…‹ã«ãªã£ãŸã‚‰ã€ãƒ“ã‚¸ãƒã‚¹ã«ä¸Žãˆã‚‹å½±éŸ¿ã¯è¨ˆã‚ŠçŸ¥ã‚Œãªã„ã€‚ SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¯DBã«å¯¾ã™ã‚‹æ”»æ’ƒã®ä¸€ã¤ã ã€‚ã‚·ã‚¹ãƒ†ãƒ ã«ãƒã‚°ãŒãªã‘ã‚Œã°è‰¯ã„ãŒã€ãã‚Œã¯èµ·ã“ã£ã¦ã¿ã¦ã‹ã‚‰ã—ã‹åˆ†ã‹ã‚‰ãªã„ã€‚äºˆé˜²æŽªç½®ã‚’ã—ã„ã¦ãŠã“ã†ã€‚ ä»Šå›žç´¹ä»‹ã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ãƒ»ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯GreenSQLã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’é˜²ãDBç”¨ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã ã€‚ GreenSQLã¯DBã¨Webã‚µãƒ¼ãƒã¨ã®ãƒ—ãƒã‚ã‚·ã¨ã—ã¦å‹•ä½œã™ã‚‹ã€‚ãã—ã¦ã€ãã®é–“ã§è¡Œã‚ã‚Œã‚‹SQLæ–‡ã‚’ç›£è¦–ã—ã€å•é¡ŒãŒã‚ã‚‹SQLã‚’äºˆã‚å¼¾ã„ã¦ãã‚Œã‚‹ã€‚ å¯¾å¿œã—ã¦ã„ã‚‹DBã¯MySQLã®ã¿ã«ãªã‚‹ã€‚ãŸã é˜²ãã ã‘ã§ã¯ãªãã€å±ãªã„ã‚‚ã®ã«å¯¾ã—ã¦ã¯ã‚¦ã‚©ãƒ¼ãƒ‹ãƒ³ã‚°ãƒã‚°ã‚’æ®‹ã—ã¦ãŠã„ã¦ãã‚Œã‚‹ã€‚ãƒã‚°ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹äº‹ã§ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å¼·åŒ–ã‚‚å®Ÿæ–½ã§ãã‚‹ã€‚ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–
iox 2007/10/05
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

MySQL
ãƒªãƒ³ã‚¯
Don'tStopMusic - Rails ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¬ã‚¤ãƒ‰ , RubyGems ãŒ Ruby 1.9 ã§ãƒ†ã‚¹ãƒˆãŒé€šã£ãŸã‚ˆã†ã§ã™
_ [Rails] Rails ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¬ã‚¤ãƒ‰ QuarkRuby: Ruby on Rails Security Guide ã§ã¯ã€Rails ã§ã‚¢ãƒ—ãƒªã‚’é–‹ç™ºã™ã‚‹éš›ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã§æ°—ã‚’ä»˜ã‘ãªã‘ã‚Œã°ã„ã‘ãªã„ã“ã¨ã‚’ç°¡æ½”ã«ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ ã„ã¾ç¤¾å†…å‘ã‘ã« Rails ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã‚’ã¾ã¨ã‚ã¦ã„ã‚‹ã®ã§å‚è€ƒã«ãªã‚Šã¾ã™ã€‚ä¸Šè¨˜ã®ãƒšãƒ¼ã‚¸ã«ã€OS ã‚³ãƒžãƒ³ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã¨ã‚»ãƒƒã‚·ãƒ§ãƒ³å›ºå®šåŒ–ã€HTTP ãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚’è¿½åŠ ã™ã‚Œã°ä¸€èˆ¬çš„ãªè„†å¼±æ€§ã¯å¤§ä½“ã‚«ãƒãƒ¼ã§ãã¾ã™ãã€‚ ãªãŠã€Rails ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦èˆˆå‘³ã®ã‚ã‚‹æ–¹ã¯ã€å‰ç”°ã•ã‚“ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ•ã‚©ãƒ¼ãƒ©ãƒ ç™ºè¡¨è³‡æ–™ã¯å¿…èªã§ã™ã€‚ è¿½è¨˜ è‡ªåˆ†ã®å‚™å¿˜éŒ²ã¨ã—ã¦è„†å¼±æ€§ã«é–¢ã—ã¦ã¾ã¨ã¾ã£ãŸæƒ…å ±ãŒã‚ã‚‹ã‚µã‚¤ãƒˆã‚„è³‡æ–™ã‚’æŒ™ã’ã¦ãŠãã¾ã™ã€‚ QuarkRuby: Ruby on Rails Security Guide : ç°¡æ½”ãªä¸€è¦§
iox 2007/09/21
Rails

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
DMZï¼ˆDeMilitarized Zoneï¼‰ã¨ã¯
DMZï¼ˆDeMilitarized Zoneï¼‰ã¨ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãªã©ã®ä¿¡é ¼ã§ããªã„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¨ã€ç¤¾å†…ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãªã©ã®ä¿¡é ¼ã§ãã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ä¸é–“ã«ç½®ã‹ã‚Œã‚‹ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯é ˜åŸŸã®ã“ã¨ã ã€‚ DMZï¼ˆDeMilitarized Zoneï¼‰ã¨ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãªã©ã®ä¿¡é ¼ã§ããªã„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¨ã€ç¤¾å†…ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãªã©ã®ä¿¡é ¼ã§ãã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ä¸é–“ã«ç½®ã‹ã‚Œã‚‹ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯é ˜åŸŸã®ã“ã¨ã ã€‚ç›´è¨³ã—ã¦ã€Œéžæ¦è£…åœ°å¸¯ã€ã¨ã‚‚å‘¼ã°ã‚Œã‚‹ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«å…¬é–‹ã™ã‚‹Webã‚µãƒ¼ãƒãªã©ã¯ã€å¤–éƒ¨ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¨±å¯ã—ã¦ã„ã‚‹ãŸã‚æ”»æ’ƒã•ã‚Œã‚„ã™ãã€å¸¸ã«ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã®å±é™ºã‚’ã¯ã‚‰ã‚“ã§ã„ã‚‹ã€‚ã“ã®ã‚ˆã†ãªã‚µãƒ¼ãƒã¨åŒã˜ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å†…ã«é¡§å®¢æƒ…å ±ã®ã‚ˆã†ãªéžå…¬é–‹ã®æƒ…å ±è³‡ç”£ã‚’ç½®ã„ã¦ãŠãã“ã¨ã¯å¤§å¤‰å±é™ºã§ã‚ã‚‹ã€‚ é‡è¦ãªæƒ…å ±è³‡ç”£ã‚’å‚ç…§ã—ãªãŒã‚‰å¤–éƒ¨ã«å‘ã‘ã¦ã‚µãƒ¼ãƒ“ã‚¹ã‚’å±•é–‹ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„å ´åˆã«ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¨å†…éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã«ã‚ˆã£ã¦åˆ†é›¢
iox 2007/09/14
ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼(Hatena) - Port801 (åˆå¿ƒè€…å‘ã‘)ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š Hamachiya2ç·¨
ã“ã‚“ã«ã¡ã¯ã“ã‚“ã«ã¡ã¯ï¼ï¼ å…ˆæ—¥ã€Twitterã§å£°ã‚’ã‹ã‘ã¦ã‚‚ã‚‰ã£ã¦ã€ ç¬¬ä¸€å›ž Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼šã£ã¦ã„ã†ã®ã«å‚åŠ ã—ã¦ããŸã‚ˆï¼ï¼ (â†‘pw: security) ãã“ã§ã€ã™ã“ã—å–‹ã£ãŸæ™‚ã®ãƒ“ãƒ‡ã‚ªã‚’é ‚ã„ãŸã®ã§ã€ã‚‚ã£ãŸã„ãªã„ã®ã§å…¬é–‹ã—ã¡ã‚ƒã„ã¾ã™ãï¼ ãƒ—ãƒ¬ã‚¼ãƒ³ã ã¨ã‹ãã†ã„ã†ã®æ…£ã‚Œã¦ãªãã¦ã€ãã ãã ãªæ„Ÿã˜ã ã‘ã©ã€ ã‚ˆã‹ã£ãŸã‚‰ä½•ã‹ã®å‚è€ƒã«ã—ãŸã‚Šã€æ™©ã”é£¯ã®ãŠã‹ãšã«ã—ã¦ãã ã•ã„ï¼žï¼œ Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®1 (httpç·¨) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®2 (CSRFç·¨1) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®3 (CSRFç·¨2) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®4 (XSSç·¨1) Port801 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‹‰å¼·ä¼š - Hamachiya2 ãã®5
iox 2007/08/31
ã‚ã¨ã§èªã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
æƒ…å ±æ¼ãˆã„ç™ºç”Ÿæ™‚ã®å¯¾å¿œãƒã‚¤ãƒ³ãƒˆé›†ï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
æƒ…å ±æ¼ãˆã„äº‹æ•…ãŒç™ºç”Ÿã—ãŸæ™‚ã«å‚è€ƒã¨ãªã‚‹å°å†Šåã€Œæƒ…å ±æ¼ãˆã„ç™ºç”Ÿæ™‚ã®å¯¾å¿œãƒã‚¤ãƒ³ãƒˆé›†ã€ã‚’ã‚¦ã‚§ãƒ–ã§å…¬é–‹ã„ãŸã—ã¾ã—ãŸã€‚ æœ¬å°å†Šåã¯ã€æƒ…å ±æ¼ãˆã„ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œãƒžãƒ‹ãƒ¥ã‚¢ãƒ«ã‚’æ•´å‚™ã—ã¦ã„ãªã„ä¸å°ä¼æ¥ãªã©ã«ãŠã„ã¦ã€æƒ…å ±æ¼ãˆã„äº‹æ•…ãŒç™ºç”Ÿã—ãŸå ´åˆã€ä½•ã‚’ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã‹ã€ä½•ã«æ°—ã‚’ã¤ã‘ãªã‘ã‚Œã°ã„ã‘ãªã„ã‹ã‚’çµŒå–¶è€…ã‚’ã¯ã˜ã‚ã¨ã™ã‚‹å¯¾å¿œãƒãƒ¼ãƒ ã®æ–¹ã€…ãŒçŸæ™‚é–“ã«ç†è§£ã—ã€é€Ÿã‚„ã‹ã«é©åˆ‡ãªå¯¾å¿œãŒã§ãã‚‹ã‚ˆã†ã«å‚è€ƒæ›¸ã¨ã—ã¦æ´»ç”¨ã§ãã‚‹ã‚ˆã†ã¾ã¨ã‚ã¦ã‚ã‚Šã¾ã™ã€‚ æœ¬å°å†Šåã¯ã€æƒ…å ±æ¼ãˆã„ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œã«ãŠã‘ã‚‹åŸºæœ¬ä½œæ¥ã‚¹ãƒ†ãƒƒãƒ—ã‚„æƒ…å ±å…±æœ‰ã€ç™ºè¡¨ãªã©ã®å…±é€šçš„ãªäº‹é …ã«é–¢ã™ã‚‹ãƒŽã‚¦ãƒã‚¦ã¨ã€æƒ…å ±æ¼ãˆã„ã‚¿ã‚¤ãƒ—åˆ¥ã®å¯¾å¿œä½œæ¥å†…å®¹ã‚„ç•™æ„ç‚¹ã®ãƒŽã‚¦ãƒã‚¦ã‚’ã‚ã‹ã‚Šã‚„ã™ãè§£èª¬ã—ã¦ã„ã¾ã™ã€‚ ãªãŠã€ã‚ˆã‚Šè©³ã—ã„å†…å®¹ã«ã¤ãã¾ã—ã¦ã¯ã€ã€Œæƒ…å ±æ¼ãˆã„ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œæ–¹ç–ã«é–¢ã™ã‚‹èª¿æŸ»å ±å‘Šæ›¸ã€ã‚’å…¬é–‹ã—ã¦ã„ã¾ã™ã®ã§ã€ä½µã›ã¦ã”åˆ©ç”¨ãã ã•ã„ã€‚
iox 2007/08/31
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
CodeZineï¼šRubyã‚’ä½¿ã£ã¦Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’æ—©æœŸã«æ¤œå‡ºã™ã‚‹ï¼ˆWeb, ãƒ†ã‚¹ãƒˆ, Rubyï¼‰
Scaffoldã§ç”Ÿæˆã—ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯å‡ºç™ºç‚¹ã«ã™ãŽãšã€è‡ªç«‹ã—ãŸå®Œæˆå“ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã®ãŸã‚ã€é–‹ç™ºè€…ãŒãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«é©ã—ãŸå½¢ã«ãªã‚‹ã‚ˆã†ã«æ‰‹ã‚’åŠ ãˆã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã—ã‹ã—ã€æ¯Žå›žä¼¼ãŸã‚ˆã†ãªä¿®æ£ã‚’è¡Œã†ã®ã§ã‚ã‚Œã°ã€ç”Ÿæˆã—ãŸæ™‚ç‚¹ã§ãã®ä¿®æ£ãŒåæ˜ ã•ã‚Œã¦ã„ã‚‹æ–¹ãŒã€ã‚ˆã‚Šç”Ÿç”£æ€§ã‚‚å‘ä¸Šã—ã¾ã™ã€‚ãã“ã§æœ¬ç¨¿ã§ã¯ã€Scaffoldã‚’ã‚«ã‚¹ã‚¿ãƒžã‚¤ã‚ºã™ã‚‹æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚
iox 2007/04/25
Ruby

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Web
ãƒªãƒ³ã‚¯
mputã®æ—¥è¨˜ã€‚ - , rootã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æ½°ã•ãªã„ã»ã†ãŒã„ã„ã¨æ€ã†ä»¶
iox 2007/03/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚µãƒ¼ãƒç®¡ç†
ãƒªãƒ³ã‚¯
ã‚¦ãƒŽã‚¦ãƒ©ãƒœ Unoh Labs: å°‚ç”¨ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã™ã‚‹ã¨ãã«ã¾ãšè¡Œã†ï¼”ã¤ã®è¨å®š
ã“ã‚“ã°ã‚“ã¯ã€æœ€è¿‘å¯’ã„å¤œãŒç¶šã„ã¦ã„ã¦è‡ªè»¢è»Šé€šå‹¤ãŒã¤ã‚‰ããªã£ã¦ããŸ naoya ã§ã™ã€‚ ã‚¦ãƒŽã‚¦ã§ã¯ã€ãƒ•ã‚©ãƒˆè”µã‚„ç¤¾å†…ã‚·ã‚¹ãƒ†ãƒ ãªã©ã¯ã€ã™ã¹ã¦å°‚ç”¨ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã—ã¦é‹ç”¨ã‚’ã—ã¦ã„ã¾ã™ã€‚ ä»Šæ—¥ã¯ã€å°‚ç”¨ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã™ã‚‹ã¨ãã«ã€åƒ•ãŒã‚¦ãƒŽã‚¦ã§å¦ã‚“ã å°‚ç”¨ã‚µãƒ¼ãƒã§ã¾ãšè¡Œã†ï¼”ã¤ã®è¨å®šã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ ãªãŠã€ä»Šå›žã®è¨å®šã¯ã™ã¹ã¦ Fedora Core 5 ã‚’ã‚‚ã¨ã«ã—ã¦ã„ã¾ã™ã€‚ (1) sudo ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ sudo ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã—ã¾ã™ã€‚sudo ã‚³ãƒžãƒ³ãƒ‰ã¯ã€åˆ¥ã®ãƒ¦ãƒ¼ã‚¶ã¨ã—ã¦ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹ã‚³ãƒžãƒ³ãƒ‰ã§ã™ã€‚ sudo ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ã€/etc/sudoers ã« sudo ã‚’è¨±å¯ã™ã‚‹ã‚°ãƒ«ãƒ¼ãƒ—ã‚’è¿½åŠ ã—ã¾ã™ã€‚æ¬¡ã®ä¾‹ã¯ã€unoh ã‚°ãƒ«ãƒ¼ãƒ—ã‚’è¿½åŠ ã™ã‚‹ä¾‹ã§ã™ã€‚ %unoh ALL = (ALL) ALL, !/bin/su, /bin/su postgres, /bin/su * postgres
iox 2007/03/15
iptableã§ãƒ‘ã‚±ãƒƒãƒˆã‚’ãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°

Linux

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ä»Šå¤œåˆ†ã‹ã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç– â€• ï¼ IT
ã€é–¢é€£è¨˜äº‹ã€‘ æœ¬å†…å®¹ã«ã¤ã„ã¦ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆè¨˜äº‹ã‚’å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ã‚ã‚ã›ã¦ã”ç¢ºèªãã ã•ã„ï¼ˆç·¨é›†éƒ¨ï¼‰ Security&Trustã‚¦ã‚©ãƒƒãƒï¼ˆ60ï¼‰ ä»Šå¤œã“ãã‚ã‹ã‚‹å®‰å…¨ãªSQLã®å‘¼ã³å‡ºã—æ–¹ ï½ž é«˜æœ¨æµ©å…‰æ°ã«èžã„ã¦ã¿ãŸ http://www.atmarkit.co.jp/fsecurity/column/ueno/60.html Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã®1ã¤ã§ã‚ã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®å˜åœ¨ã¯ã€ã‹ãªã‚ŠåºƒãçŸ¥ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚ã—ã‹ã—ã€ãã®å¯¾ç–ã¯ã¾ã æœ¬å½“ã«ç†è§£ã•ã‚Œã¦ã„ãªã„ã‚ˆã†ã«æ€ãˆã‚‹ã€‚ãƒ•ã‚©ãƒ¼ãƒ ã‹ã‚‰æ¸¡ã•ã‚ŒãŸå€¤ã®ç‰¹æ®Šæ–‡å—ã‚’ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã—ãŸã‚Šã€PHPã®magic_quotes_gpcã¨ã„ã£ãŸè‡ªå‹•ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—æ©Ÿèƒ½ã‚’ã‚ªãƒ³ã«ã™ã‚‹ã ã‘ã§å¯¾ç–ã—ãŸã¤ã‚‚ã‚Šã«ãªã£ã¦ã„ãªã„ã ã‚ã†ã‹ã€‚ åŸºæœ¬ã¯ã‚‚ã¡ã‚ã‚“ã€ã‚»ã‚«ãƒ³ãƒ‰ã‚ªãƒ¼ãƒ€ãƒ¼SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„ãƒžãƒ«ãƒãƒã‚¤ãƒˆæ–‡å—ã‚’åˆ©ç”¨ã—ãŸSQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ã‚„ã€ãã®å¯¾
iox 2006/11/02
SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³å¯¾ç–

å¾Œã§èªã‚€

ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å®Ÿç¾ã«å‘ã‘ã¦ â€• ï¼ IT
æ¤œæŸ»é …ç›®ã‚’ã—ã£ã‹ã‚Šå®šç¾© æ˜Ÿé‡Žå›ã€€ã€Œå¤§ã¾ã‹ã«ã„ã†ã¨ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã§ã€ã€Žã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ†ã‚¹ãƒˆã€ã£ã¦ã„ã†å·¥ç¨‹ã‚’æ˜Žç¢ºã«å®šç¾©ã—ã¾ã—ã‚‡ã†ã£ã¦æ„Ÿã˜ã§ã™ã‹ãã€ èµ¤å‚ã•ã‚“ã€€ã€Œã»ãƒ¼ã€ æ˜Ÿé‡Žå›ã€€ã€Œå®Ÿéš›ã€‚ã€Žãªã‚“ã¨ãªãå¤§ä¸ˆå¤«ãã†ã€ã£ã¦ã„ã†ãƒ¬ãƒ™ãƒ«ã§ã—ã‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã£ã¦è€ƒãˆã‚‰ã‚Œã¦ã„ãªã„å ´åˆãŒå¤šã„ã‹ã‚‰ã€ãƒ†ã‚¹ãƒˆé …ç›®ã‚’ä½œã‚Šã¾ã—ã‚‡ã†ã£ã¦æ„Ÿã˜ã§ã„ã‚ã„ã‚å…·ä½“ä¾‹ã‚’æŒ™ã’ã¦ã¾ã—ãŸã€ èµ¤å‚ã•ã‚“ã€€ã€Œã¸ã‡ï½žã€‚å…·ä½“ä¾‹ãã‡ï½žã€ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å®‰å…¨æ€§ã‚’é«˜ã‚ã‚‹ãŸã‚ã«ã¯ã€å®Ÿéš›ã«æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ï¼ˆè„†å¼±æ€§ã®å¯èƒ½æ€§ã‚’ç¤ºå”†ã§ãã‚‹ãƒ‘ã‚¿ãƒ¼ãƒ³ï¼‰ã‚’è©¦ã™ã“ã¨ãŒå¿…è¦ã¨ãªã£ã¦ãã‚‹ã€‚ã™ã¹ã¦ã®æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ç¶²ç¾…ã™ã‚‹ã“ã¨ã¯é›£ã—ã„ãŒã€å„æ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ã§å…±é€šã—ã¦ã„ã‚‹éƒ¨åˆ†ã‚’å–ã‚Šå‡ºã—ã¦æ¤œæŸ»ã™ã‚‹ã“ã¨ã§ã€ã»ã¨ã‚“ã©ã®æ”»æ’ƒã‚’é˜²ãã“ã¨ãŒå¯èƒ½ã¨ãªã‚‹ã€‚ ä»¥ä¸‹ã«ã€ä»£è¡¨çš„ãªè„†å¼±æ€§4ã¤ã«å¯¾ã™ã‚‹æ¤œæŸ»ãƒ‘ã‚¿ãƒ¼ãƒ³ãŠã‚ˆã³ç¢ºèªäº‹é …ã«ã¤ã„ã¦ç¤ºã™ã€‚ã“ã‚Œã‚‰ã®é …ç›®ã‚’å®Ÿæ–½ã™ã‚‹ã ã‘ã§æ ¼æ®µã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒå‘ä¸Šã™ã‚‹ã€‚
iox 2006/10/31
å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®å®Ÿç¾ã«å‘ã‘ã¦ ï¼ ï¼ IT

Web

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1